could someone hook me up to graph.cool permission system how can i make allType query return only a subset of results (those that the user is eligible to read)